Capcom ID Breach Exposes 11.77 Million Email Addresses
October 23, 2026
Capcom confirmed attackers accessed its CAPCOM ID login service, exposing 11,774,247 email addresses and login metadata, and locked out 196
Cybersecurity
Capcom ID Breach Exposes 11.77 Million Email Addresses
Capcom confirmed attackers accessed its CAPCOM ID login service, exposing 11,774,247 email addresses and login metadata, and locked out 196 account holders.
Quest Diagnostics Reports Breach of Quanum Lab Services Manager
Quest Diagnostics told regulators an intruder accessed its Quanum Lab Services Manager platform and may have reached certain patient records; scope is unknown.
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
GitLab fixed CVE-2026-110264, a CVSS 10.0 regex flaw in Onigmo that can let unauthenticated users run code on self-managed servers back to version 7.0.
Arista Patches Exploited VeloCloud Orchestrator Zero-Day
Arista fixed CVE-2026-114625, a CVSS 9.9 SQL injection in VeloCloud Orchestrator that it says is exploited, letting low-privilege users gain operator access.
eMudhra Exits TLS Business as Chrome and Oracle Distrust Its Keys
eMudhra will leave the global TLS certificate business, Chrome will distrust its ECC G3 root on October 27, and Oracle issued a Java alert for ...
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Okta fixed four Access Gateway vulnerabilities in three advisories, including CVE-2026-115547, a CVSS 9.1 command execution flaw in the Admin Console.
ZDI Posts Unpatched Linux KSMBD RCE Flaws to Public Mailing Lists
Trend Micro's ZDI posted two unpatched CVSS 9.0 Linux KSMBD flaws to public kernel mailing lists, with no mainline fix available and no CVE IDs ...
CISA Warns of Nine Kiloview E3 Encoder Flaws, Two at CVSS 9.9
CISA advisory ICSA-26-295-01 covers nine Kiloview E3 NDI encoder flaws, including two CVSS 9.9 command injections that give root; firmware V1.30 fixes them.
HPE Patches 72 Aruba AOS-8 and AOS-10 Flaws, Eight at CVSS 10.0
HPE advisory HPESBNW05162 fixes 72 vulnerabilities in Aruba AOS-8 and AOS-10 wireless products, including 34 critical flaws and eight rated CVSS 10.0.
Railway Says Intruder May Have Decrypted Customer Secrets
Railway detected anomalous activity on systems storing customer environment variables and urged all users to rotate secrets; crypto wallet thefts were reported.
Quest Diagnostics Reports Breach of Quanum Lab Services Manager
October 23, 2026
Quest Diagnostics told regulators an intruder accessed its Quanum Lab Services Manager platform and may have reached certain patient records;
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
October 23, 2026
GitLab fixed CVE-2026-110264, a CVSS 10.0 regex flaw in Onigmo that can let unauthenticated users run code on self-managed servers
Arista Patches Exploited VeloCloud Orchestrator Zero-Day
October 23, 2026
Arista fixed CVE-2026-114625, a CVSS 9.9 SQL injection in VeloCloud Orchestrator that it says is exploited, letting low-privilege users gain
eMudhra Exits TLS Business as Chrome and Oracle Distrust Its Keys
October 23, 2026
eMudhra will leave the global TLS certificate business, Chrome will distrust its ECC G3 root on October 27, and Oracle
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
October 23, 2026
Okta fixed four Access Gateway vulnerabilities in three advisories, including CVE-2026-115547, a CVSS 9.1 command execution flaw in the Admin
ZDI Posts Unpatched Linux KSMBD RCE Flaws to Public Mailing Lists
October 23, 2026
Trend Micro’s ZDI posted two unpatched CVSS 9.0 Linux KSMBD flaws to public kernel mailing lists, with no mainline fix
CISA Warns of Nine Kiloview E3 Encoder Flaws, Two at CVSS 9.9
October 23, 2026
CISA advisory ICSA-26-295-01 covers nine Kiloview E3 NDI encoder flaws, including two CVSS 9.9 command injections that give root; firmware
HPE Patches 72 Aruba AOS-8 and AOS-10 Flaws, Eight at CVSS 10.0
October 23, 2026
HPE advisory HPESBNW05162 fixes 72 vulnerabilities in Aruba AOS-8 and AOS-10 wireless products, including 34 critical flaws and eight rated
Railway Says Intruder May Have Decrypted Customer Secrets
October 23, 2026
Railway detected anomalous activity on systems storing customer environment variables and urged all users to rotate secrets; crypto wallet thefts
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.